Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-09-23 17:58Z
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-73841 — OpenChoreo: Prior to 1.1.6 and 1.2.3, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/handlers/wirelogs.go authorize component:exec and wirelogs:view usin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73841

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.1.6 and 1.2.3, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/handlers/wirelogs.go authorize component:exec and wirelogs:view using the caller-supplied project query parameter instead of comp.Spec.Owner.ProjectName, allowing a user with a project-scoped grant to execute commands in and read wirelogs from components owned by other projects in the same namespace. Th CVSSv3.1 8.8 (HIGH) · EPSS 28th percentile

CWECWE 639CWECWE 863VNDOpenchoreoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-73667 — OpenChoreo: Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73667

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -c instead of passing the values through container.env, allowing arbitrary commands to run in workflow pods while affected privileged Podman templates lacked hostUsers: false. This iss CVSSv3.1 8.8 (HIGH) · EPSS 47th percentile

CWECWE 78VNDOpenchoreoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-73666 — OpenChoreo: Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChoreo Backstage backend hardcoded backend.auth.dangerouslyDisableDefaultAuthPolicy and auth.providers.guest.dangerouslyAllowOuts

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73666

OpenChoreo is a developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChoreo Backstage backend hardcoded backend.auth.dangerouslyDisableDefaultAuthPolicy and auth.providers.guest.dangerouslyAllowOutsideDevelopment to true, exposing /api/* without authentication and allowing unauthenticated catalog reads, scaffolder log reads, and catalog location creation or deletion. This issue is fixed in versions 1.0.4, 1.1.4, and 1.2.1. CVSSv3.1 8.2 (HIGH) · EPSS 40th percentile

CWECWE 306VNDOpenchoreoTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-73659 — Trigger: From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73659

Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/<projectRef>/<env>/ object-store prefix and enabling a project API key to read or CVSSv3.1 8.1 (HIGH) · EPSS 27th percentile

CWECWE 22VNDTriggerTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-73658 — Trigger: From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while apps/webapp/app/routes/api.v1.packets.$.ts accepts params["*"] without rejecting dot segments and uses findResource: async () => 1 without per-resource ownership validation. WHATWG path normaliz CVSSv3.1 8.2 (HIGH) · EPSS 26th percentile

CWECWE 862CWECWE 22CWECWE 20VNDTriggerTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-73305 — Budibase: Prior to 3.39.24, POST /api/public/v1/roles/assign called validateGlobalRoleUpdate without checking appBuilder.appId or role.appId in packages/server/src/api/controllers/pub

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73305

Budibase is an open-source low-code platform. Prior to 3.39.24, POST /api/public/v1/roles/assign called validateGlobalRoleUpdate without checking appBuilder.appId or role.appId in packages/server/src/api/controllers/public/globalRoleValidation.ts. An app-scoped builder could scope the request to an app they control and then grant themselves builder access or an arbitrary role in another app, exposing that app data, datasource configuration, and automations. This issue is fixe CVSSv3.1 8.8 (HIGH) · EPSS 30th percentile

CWECWE 862CWECWE 269CWECWE 863VNDBudibaseTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-72856 — Budibase: versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner (changeTenantOwnerEmail) endpoint.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72856

Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner (changeTenantOwnerEmail) endpoint. On self-hosted instances (SELF_HOSTED or DISABLE_ACCOUNT_PORTAL set), the cloudRestricted middleware is a no-op and the route is protected only by a general authentication check, so any authenticated user — including a lowest-privilege BASIC app user — can reassign the tenant account-holder (top-privilege admin) email to a CVSSv3.1 8.1 (HIGH) · EPSS 26th percentile

CWECWE 640VNDBudibaseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-72855 — Budibase: before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72855

Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks. Attackers can configure hostnames that resolve to public addresses during validation but resolve to loopback or private addresses during actual connection, allowing access to blocked internal HTTP services. CVSSv3.1 8.5 (HIGH) · EPSS 19th percentile

CWECWE 918VNDBudibaseTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-08-13
2026-08-13 22:17Z
CRIT

CVE-2026-72851 — Budibase: before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE_QUERY

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72851

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE_QUERY steps. Attackers can POST attacker-controlled JSON to the webhook trigger endpoint to inject SQL payloads that execute with builder-configured database credentials, enabling data exfiltration, modification, and persistence in connected datasources like Snowflake. CVSSv3.1 10.0 (CRITICAL) · EPSS 21th percentile

CWECWE 89VNDBudibaseTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-08-13
2026-08-13 22:17Z
CRIT

CVE-2026-72850 — Budibase: before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72850

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing arbitrary content to any path writable by the Budibase process. CVSSv3.1 9.1 (CRITICAL) · EPSS 35th percentile

CWECWE 22VNDBudibaseTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-13
2026-08-13 22:17Z
CRIT

CVE-2026-72842 — ACL: luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72842

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via `/.%2E` in the `lxc_name` parameter to escape container directories and control host-side scripts executed through `lxc.hook.start-host`, achieving root code execution on the OpenWrt host. CVSSv3.1 9.9 (CRITICAL) · EPSS 35th percentile

CWECWE 73VNDAclTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-08-13
2026-08-13 22:17Z
CRIT

CVE-2026-72841 — luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72841

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SSH keys in system directories accessible on reboot. CVSSv3.1 9.9 (CRITICAL) · EPSS 35th percentile

CWECWE 73TYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-72840 — OpenWrt: LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72840

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write, which the default busybox crond daemon executes as root within one minute. CVSSv3.1 8.8 (HIGH) · EPSS 23th percentile

CWECWE 266VNDOpenwrtTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-13
2026-08-13 22:17Z
CRIT

CVE-2026-72839 — filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72839

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions, allowing unrestricted access to all files. CVSSv3.1 9.8 (CRITICAL) · EPSS 33th percentile

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-13
2026-08-13 22:17Z
CRIT

CVE-2026-72776 — AgenticSeek: (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72776

AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send unauthenticated HTTP requests that cause the autonomous agent to generate and execute shell commands through BashInterpreter using subprocess.Popen with shell=True and safety=False CVSSv3.1 9.8 (CRITICAL) · EPSS 55th percentile

CWECWE 306VNDAgenticseekTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-13
2026-08-13 22:17Z
HIGH

CVE-2026-56865 — GOPROXY: A malicious GOPROXY was previously capable of forging up to two sumdb tiles that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-56865

A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that cannot be detected by evaluating the transparency log. All tiles are now correctly verified against their parents. In order to determine if you have been affected: rm -r go.sum go.wor CVSSv3.1 8.4 (HIGH) · EPSS 1th percentile

CWECWE 347VNDGoproxyTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-08-13
2026-08-13 21:18Z
CRIT

CVE-2026-8715 — Vault: Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-8715

Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their contents to a tenant-controlled endpoint, potentially leading to privilege escalation within the cluster. This vulnerability (CVE-2026-8715) is fixed in Vault Secrets Operator 1.5.0. CVSSv3.1 9.6 (CRITICAL)

CWECWE 552VNDVaultTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-08-13
2026-08-13 21:17Z
CRIT

CVE-2026-19297 — IBM: Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19297

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts. CVSSv3.1 9.1 (CRITICAL)

CWECWE 307VNDIbmTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-13
2026-08-13 21:17Z
HIGH

CVE-2026-18509 — IBM: i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18509

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system. CVSSv3.1 8.2 (HIGH)

CWECWE 285VNDIbmTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-08-13
2026-08-13 21:17Z
HIGH

CVE-2026-18249 — IBM: i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18249

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses. CVSSv3.1 8.4 (HIGH)

CWECWE 269VNDIbmTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-08-13
2026-08-13 21:17Z
HIGH

CVE-2026-18193 — IBM: i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18193

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses. CVSSv3.1 8.9 (HIGH)

CWECWE 269VNDIbmTYPVulnerability
8.9
CVSS v3.1
95
Edit Score
2026-08-13
2026-08-13 21:17Z
HIGH

CVE-2026-18101 — IBM: i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18101

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps. CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDIbmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-13
2026-08-13 21:17Z
HIGH

CVE-2026-17502 — IBM: i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17502

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. CVSSv3.1 8.6 (HIGH)

CWECWE 787VNDIbmTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-08-13
2026-08-13 21:17Z
CRIT

CVE-2026-17482 — IBM: Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17482

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths. CVSSv3.1 9.8 (CRITICAL)

CWECWE 73VNDIbmTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-13
2026-08-13 21:17Z
HIGH

CVE-2026-17481 — IBM: Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17481

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs. CVSSv3.1 8.8 (HIGH)

CWECWE 117VNDIbmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score